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© Control method and mechanism for zero-origin data spaces. 



© Within a data processing system, a control 
method and mechanism for supporting a data space 
without common segments in addition to traditional 
address spaces containing common segments. The 
invention includes logic for eliminating duplication of 
lookaside table entries for virtual addresses within 
shared segments, but not for identical virtual ad- 
dresses within data address spaces; it also provides 
for overriding low address protection for store oper- 
ations into data spaces. Thus, it permits the entire 
virtual addressing range to be available to programs 

ff) wishing to use such data spaces for data isolation 

^and data sharing. 
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© Control method and mechanism for zero-origin data spaces. 



© Within a data processing system, a control 
method and mechanism for supporting a data space 
without common segments in addition to traditional 
address spaces containing common segments. The 
invention includes logic for eliminating duplication of 
lookaside table entries for virtual addresses within 
shared segments, but not for identical virtual ad- 
dresses within data address spaces; it also provides 
for overriding low address protection for store oper- 
ations into data spaces. Thus, it permits the entire 
virtual addressing range to be available to programs 

^wishing to use such data spaces for data isolation 

g^and data sharing. 
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CONTROL METHOD AND MECHANISM FOR ZERO-ORIGIN DATA SPACES 



The invention relates to a method and a 
mechanism for having concurrently available to an 
operating system and programs executing under 
the control of that operating system, two distinct 
types of virtual address spaces: one, called herein 
a program address space consisting of both private 
and common address ranges, and one, called here- 
in a data address space, or data space, consisting 
of only private address ranges. 

Data processing systems using virtual address- 
ing in multiple virtual address spaces are well 
known, such as the IBM System/370 systems using 
MVS and MVS/XA system control programming. 
Such systems define each address space as hav- 
ing linear addressability from 0 to (2"31-1) bytes 
using segment tables, in which each entry contains 
the address of a page table, and page tables in 
which each page table defines a plurality of page 
entries in the address space. Each page entry may 
contain the address of any assigned page frame in 
main storage. Each address space is referred to by 
a pointer called a segment table origin (STO) which 
locates the address space segment table in stor- 
age. In current System/370 architecture, each ad- 
dress space has up to 2 gigabytes (2 Ss 31) of linear 
virtual addressability beginning at address zero. In 
current System/370 MVS/XA operation, an essen- 
tially unlimited number of address spaces are avail- 
able; different address spaces are assigned to dif- 
ferent users of the system, and the address spaces 
obtain isolation between the users of the system, 
i.e.. one user can only address within his own 
address space and is isolated from the address 
spaces of the other users, with certain exceptions: 
the exceptions are (1 ) when an address space, or a 
part thereof, is defined in common among all users 
(in which case optimization of usage of a Directory 
lookaside table translation lookaside buffer (DLAT, 
or TLB) can be achieved by inventions such as 
those shown in U.S. patent 4,096,573 entitled 
"DLAT Synonym Control Means for Common Por- 
tions of All Address Spaces" to A R. Heller et al., 
and U.S. patent 4,136,385 entitled "Synonym Con- 
trol Means for Multiple Virtual Storage Systems" to 
P. M. Gannon et ah, both assigned to the same 
assignee as the present application); and (2) when 
multiple address spaces are addressable from a 
given address space (mechanisms for which are 
defined in U.S. patent 4,355.355 entitled "Address 
Generating Mechanism for Multiple Virtual Spaces" 
to J. R. Butwell et al., and 4,521,846 entitled 
"Mechanism for Accessing Multiple Virtual Address 
Spaces" to C. A Scalzi et al., both also assigned 
to the assignee of the present application; and U.S. 
patents 4,366,537, 4,430.705, and 4,500,952, all 



also assigned to the assignee of the present inven- 
tion, which deal with a dual address space (DAS) 
facility). 

In both of these cases, the structure of address 

5 spaces is fixed with respect to a particular control 
program: that is, in case (1), address ranges des- 
ignated as common are common to all defined 
address spaces, and so all such address spaces 
can gain in performance from the DLAT synonym 

io control inventions cited above for addresses falling 
within common segments; likewise, in case (2), the 
basic address space structure of all defined ad- 
dress spaces is fixed, and so, again, those same 
inventions can be used to eliminate synonym table 

75 entries for addresses within the designated com- 
mon range within a translation lookaside buffer. 

A failure of the prior art, however, lay in the 
fact that that invention, and its associated perfor- 
mance benefit, required that common segments be 

20 common to all defined address spaces. The inven- 
tion of the Gannon patent noted earlier (4,136;385) 
must be enhanced to allow for the existence of 
both address spaces sharing common segments, 
and data spaces without segments in common 

25 (without this enhancement, any attempt to employ 
the Gannon invention in an environment where data 
spaces and program spaces co-exist would result 
in occasional instances of real addresses within 
common segments of program spaces being re- 

30 turned by the DAT process, where the real address 
within a data space's private segment was de- 
sired). There are cases where it is desirable, for 
purposes of, e.g., data isolation, to associate data 
with individual address spaces - where the 

35 predefined common address ranges cannot be 
used for this data, so that the amount of data that 
may be mapped into a particular address space is 
limited to that portion of the virtual addressing 
range not dedicated to "common" addresses; fur- 

40 ther, since (for historical reasons) common areas 
within the MVS/XA addressing range are not all 
contiguous, large blocks of data within an address 
space must be fragmented to avoid the common 
address segments. Finally, a system 370 feature 

45 called "low Address Protection" (see, e.g., IBM 
System/370 Extended Architecture Principles of 
Operation, SA22-7085) prevents the first 512 bytes 
of an address space's addressing range from being 
stored into when the feature is active. This further 

so limits the availability of address spaces for data 
storage. 

It is a primary object of this invention to permit 
large data objects (up to 2 gigabytes) to be 
mapped into virtual data spaces, without fragmen- 
tation because of common segments appearing 
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within different address ranges of the address 
space to permit the above mapping to take place in 
certain data spaces defined to an operating system 
which data spaces have no segments in common 
with other data or program spaces, while other 
program address spaces do have common seg- 
ments that they share with similar address program 
spaces to permit improved processor efficiency by 
eliminating duplicate entries within a translation 
lookaside buffer for virtual addresses within shared 
segments for address spaces that have shared 
segments, while recognizing that such entries may 
not be shared for address spaces that have no 
such shared segments to allow the use of data 
address spaces, directly accessible by programs 
executing in other address spaces, to facilitate the 
isolation and restricted sharing of data objects and 
to allow the use of all addresses within the possible 
virtual addressing range of an address space, be- 
ginning at virtual address zero, for user data. 

The solution of the object facilitates the utiliza- 
tion within data processing systems of logical con- 
structs called data spaces for holding data to be 
accessed from programs executing in address 
spaces. Central to this invention is a mechanism 
and a method permitting the full addressing range 
of the machine (from 0 to 2 gigabytes in the 
MVS/XA system described) to be used for acces- 
sing data contiguously, without the reservation of 
common areas that is part of the definition of a 
program address space, (e.g. in such a program 
address space, the first 512 bytes are designated 
as the Program Storage Area, or PSA, and are not 
usable for storing private data). 

In order to allow this usage of the full address- 
ing range in a data space, the solution provides 
means whereby a previously resolved virtual ad- 
dress within a common range for a program ad- 
dress space, located in a translation lookaside buff- 
er, will not be used in error for translating an 
identicai virtual address within a data space. The 
solution aJso provides a mechanism for accessing 
the data space from within a program space, for 
overriding low address protection for store oper- 
ations into data spaces, and a method for mapping 
data into the data space. 

Figure 1A is a schematic diagram of the 
structure of an MVS/XA address space of the prior 
art, containing common segments. 

Figure IB is a schematic diagram of the 
structure of the data space of this invention, which 
does not contain common segments. 

Figures 2A and 2B comprise a block dia- 
gram showing the process of translation of virtual 
to real (main storage) addresses, making use of 
lookaside tables. 



Figure 3 is a schematic diagram of the for- 
mat for each pair of associated DLAT entries ac- 
cessed by a single DLAT hashed address. 

Figure 4 is a block diagram showing details 
5 of a translator used in the embodiment. 

Figure 5 is a block diagram showing the 
DLAT load controls used in the embodiment. 

Figure 6A and 6B comprise a block diagram 
showing in detail the logic required by this inven- 
io tion to determine whether real addresses may be 
fetched from the lookaside table for given virtual 
addresses. 

Figure 7 is a schematic diagram illustrating 
the mapping of segments to page tables, 
rs Figure 8 is a schematic diagram illustrating 

the use of two data spaces by a program executing 
in an address space. 

Figure 9 is a block diagram showing the 
interrelationship of the STD selection mechanism 
20 and the process of dynamic address translation 
(DAT). 

Figure 10 is a schematic diagram illustrating 
the use of an access register in addressing 
operands. 

25 Figure 1 1 is a schematic diagram illustrating 

an access register translation of contents of an 
access register of Figure 10. 

Figure 12 is a block diagram illustrating the 
use of a data space for data isolation, using the 
30 Data-in-Virtual mechanism. 

Figure 13 is a block diagram illustrating the 
overriding of low address protection for data 
spaces. 

35 The zero-origin data space of the current in- 

vention is a logical construct whose existence and 
practical usage is made possible by a related set 
of facilities: 1) A common-segment override facility, 
and low address protect avoidance mechanism, 
40 both central to this application; 2) a mechanism for 
accessing data within the virtual address range of a 
data space from within the virtual address range of 
a program address space; and 3) means for as- 
sociating logically contiguous blocks of data resid- 
es ing on an external medium with a data space in a 
way that allows the data to be readily used by an 
executing user program without explicit I/O pro- 
gram steps in that user program. 

50 

1. Common-segment Override & Low-Address Pro- 
tect Avoidance Facility 

Figure 1A illustrates the structure of a typical 
55 MVS/XA program address space. The shaded 
areas are "common" to all program address 
spaces - there is only one logical version of these 
common areas, so that a change made to a com- 
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mon area of storage is immediately reflected in all 
program address spaces, since all share the same 
common storage. Data which is placed into a pro- 
gram address space, which is to be isolated from 
other programs, must be placed into one of the 5 
private areas (11. 12) which, being logically disjoint, 
cannot accommodate extremely large data sets 
without fragmentation. 

Figure IB illustrates the "data space" of the 
present invention. It is distinguished from a pro- ro 
gram address space by an indicator bit in an 
associated segment table descriptor (62A, Figure 
6). The absence of shaded areas in Figure 1B 
indicates that no areas of such a data space are 
common either to other data spaces, or to any 75 
program address space. To illustrate, a virtual ad- 
dress referring to a storage element within com- 
mon storage in a program space (13A & 13B) 
denotes an element whose content is the same 
viewed from any program space; therefore virtual 20 
addresses for all storage within common segments 
within program spaces are resolved to the same 
set of page tables (71, Figure 7). On the other 
hand, a virtual address referring to a storage ele- 
ment in private storage (14, 15, 16) is resolved to a 25 
unique page table (72, 73). The process of resolv- 
ing a virtual address into a corresponding real 
(main storage) address (where the virtual address 
represents an element that currently resides in real 
storage) is called dynamic address translatidn 30 
(DAT), and is well known in the prior art (see, e.g.,* 
IBM System/370 Extended Architecture Principles 
of Operation, Publication No. SA22-7085). For per- 
formance reasons, a translated virtual address, and 
its corresponding real address, is maintained for a as 
time in a translation lookaside buffer (TLB, or 
DLAT). where it can be used to avoid the overhead 
of retranslating a virtual address previously trans- 
lated for an address space. Additional performance 
benefit is gained by recognizing that a previously 40 
translated virtual address even within a different 
address space will be resolved to the same real 
address where both virtual addresses are the 
same, and both fall within a common segment (in 
this case, the virtual addresses, identical except 45 
that they occur within common segments of dif- 
ferent address spaces, are termed "synonyms"). 

Figures 2A and 2B illustrate a block diagram of 
a general framework in which the preferred em- 
bodiment may operate based on the invention of so 
U.S. patent 4.136.385 referenced above (figure 6A 
contains the detailed logic of the common segment 
override portion of the invention claimed here). A 
STOK and controls 21 has an active control regis- 
ter which contains the active segment table origin 55 
(STO) currently being used by the processor virtual 
address currently loaded into a logical address 
register (LAR) 31 . which is currently requesting the 



address to be accessed. Controls 21 also contain a 
segment table origin stack (STOK) 22 which has 
entries which sequentially receive each active STO 
when it is loaded into the active control register. 
The program address spaces and data spaces 
represented by the STO's in STOK are the only 
address spaces which are represented currently by 
the entries in DLAT 3. Each entry in the STOK has 
an index value of 2 through 30. These index values 
are used as a STO identifier (STO ID). The cur- 
rently active STO in STOK is located by the STO 
ID in a pointer register (PTR REG) 23. The STO ID 
currently in pointer register 23 locates the STOK 
entry having the same STO as the STO contained 
currently in the active control register. The reason 
why STO ID'S 2 through 30 are only used is to 
accommodate an index size of five binary bits 
providing values 0-31 , of which the values 0, 1 and 
31 are used in the DLAT's to indicate the special 
conditions of invalid STO, no dynamic address 
translation (NON-DAT mode) and common storage, 
respectively. The latter value is introduced by this 
invention to provide a DLAT indication that it ad- 
dresses a page shareable by all address spaces. A 
larger STOK with more STO IDs could be provided 
for example, by having a six bit STO ID support 61 
STOK entries (26-3), etc. 

in Figure 2A, box 24 signals an overflow con- 
dition for STOK 22 when ail entries 2 through 30 
are filled and another STO is to be entered into the 
STOK. Circuit 24 generates the overflow signal 
when STO ID 30 is in PTR REG 23 and a next 
active STO in the active control register is not 
found by a search of STOK entries 2 through 30. 
The overflow output signal from circuit 24 is trans- 
ferred to DLAT load circuits 5 to reset all DLAT 
entries. Note that other implementations may not 
require this broadside invalidation technique. 

DLAT 3 in Figure 2A is a two-way set associ- 
ative, in which half of the DLAT array contains 
DLAT table 0 having 64 entries designated as 00 
through 063. and the other half of the DLAT array 
is designated as DLAT table 1 containing 64 en- 
tries designated as 10 through 163. DRR register 
3B contains the address of the currently selected 
pair of DLAT entries. The address in DRR 3B is 
derived by hash circuits 3A hashing bits of the 
virtual address in LAR 31. 

Figure 3 illustrates the format for the pair of 
selected entries being addressed by the DRR reg- 
ister. It is seen therein that each entry contains a 
STO ID derived from either (1) pointer register 23, 
or (2) from a common space bit C 26 in the 
segment table entry (STE) accessed for translation 
of the DLAT entry. 

Continuing in Figure 2. the translation of the 
virtual address in LAR 31 is conventionally done by 
a translator 4 in which the SX component of the 
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address indexes the STE entries from the STO 
ADDRESS of the segment table 27 in Figure 2B, 
which STE address is STO plus SX. The page 
table origin (PTO) address 28 is in the accessed 
STE and is used by the translator to address the 
page table entry (PTE), shown as PTE-g 29 in 
Figure 2B. PTE-g is addressed therein at the loca- 
tion PTO plus PX. The real or absolute address of 
the page to be accessed is contained in the PFRA 
29 component of the accessed PTE, which is then 
transferred by translator 4 to the load controls 5 
and put into the absolute address (RA) 301 field in 
the selected DLAT. 

When bit C26 in the STE format is set to 1. the 
segment table entry is thereby indicated to repre- 
sent a common space segment (i.e. shared seg- 
ment) represented by all pages in the page table 
accessed by means of STE. However, when bit C 
is off, the STE defines a private segment, i.e. not 
accessible by any other address space than that 
defined by the STO which addresses the particular 
segment table. 

In Figure 3, the virtual address (VA) field 300 in 
the selected DLAT entry also receives bits from the 
VA in LAR 31 of Figure 2A in order to distinguish 
this page VA in the DLAT from all other page VA's 
represented in other DLAT entries, in which the 
hashed address always is part of the distinguishing 
characteristic for the virtual addresses represented 
in the DLAT. The key received in the DLAT entries 
is the storage protect key for the page. 

A DLAT loading operation occurs whenever the 
processor transfers an address into LAR 31 of 
Figure 2A, and the read controls find that no DLAT 
entry addresses the page required by the address 
in LAR 31- The lack of such DLAT entry is in- 
dicated by DLAT read controls 6 in Figure 2A 
providing a DLAT exception signal on line 67A to 
translator 4. Translator 4 converts this signal by a 
clock mechanism to DLAT load signal 38A. DLAT 
read controls 6 simultaneously compare all of the 
pertinent fields in each of the pair of selected 
DLAT entries being hash addressed by the DRR 
3B with corresponding fields comprising the VA 
bits in LAR 31. the STO ID being provided from 
pointer register 23, and the key field provided by 
the program status word (PSW). If equality is found 
for one of the two DLAT entries 0, 1 respectively 
being simultaneously compared in the DLAT read 
controls 6, the read controls select only that DLAT 
having all pertinent fields equal. The selected 
DLAT entry then causes controls 6 to output a 
page frame address (RA) as a signal on line 69A to 
storage access controls 25 to initiate the access of 
one or more bytes beginning at that RA address 
obtained from the selected DLAT entry by con- 
catenating it with the displacement (D) obtained 
from LAR 31 . 



However, the DLAT read controls 6 may note 
that a common storage indicator value of binary 31 
exists in the STO ID field of the selected DLAT 
entry, in which case, only for address spaces as 

5 known in the prior art, but not for data spaces as 
defined by this invention, the DLAT read controls 6 
ignore the- non-equal compare due to the STO ID 
value 31 by forcing it to act like an equal STO ID 
compare for all STO ID values. Then the access of 

io the virtual address in LAR 31 is permitted, regard- 
less of which address space is making the request 
(indicated by pointer reg 23). 

Accordingly, it is thereby realized that the STO 
ID field in the DLAT is loaded with a value that 

75 controls whether the DLAT entry is permitted to be 
used by only the address space which loaded it. or 
by all address spaces regardless of which address 
space loaded it. 

20 

Translator 4 

The translator inputs comprise logical address 
register (LAR) 31, which is also represented in 

25 Figure 2, and a translator input register (TIR) 32. 
LAR 31 receives the virtual addresses from the 
instruction unit of the processor, and TIR 32 re- 
ceives the STOs from the active STD control regis- 
ter and the STEs and PTEs from main storage, one 

30 at a time. The state of the common space bit C in 
an STE is sensed by outgate 32C,. which senses 
bit position 30 in the TIR 32. Outgate 32C is 
connected to the set input of common storage latch 
37 and sets it on if bit C is on, and sets the latch 

35 off if bit C if off. Output lead 37A provides the latch 
setting to the DLAT load controls 5, which then 
generate and load the common storage value 31 
into the STO ID of a currently selected DLAT entry, 
if the common space bit C is on. If the common 

40 space bit C is off, then the latch 37 is set off, and 
line 37A will signal controls 5 to load the STO ID 
being provided from pointer register 23 into the 
selected DLAT. 

The output of translator 4 provides the ad- 

45 dresses STO + SX, or PTO + PX, as required to 
access the STEs and PTEs, respectively. The 
PFRA + D value is not generated by the translator 
but is obtained by concatenation of the RA from 
the selected DLAT and the D value from the LAR 

so 31 which concatenation is directly done by the 
storage access controls 25 in Figure 2 in order to 
obtain faster generation of byte addresses in a 
page currently available by means of a DLAT entry. 
A clock 38 controls the timing involved in the 

55 translator circuitry. The clock is actuated by a 
DLAT exception signal on line 67A from the DLAT 
read controls 6. When no DLAT entry is found, the 
clock completes its operation by providing a DLAT 
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load signal on line 38A which signals that the PFRA 
has been provided from the PTE and is not avail- 
able for loading into the selected DLAT entry. 



PLAT Load Controls 5 

The DLAT load controls in Figure 5 comprise a 
plurality of gates which load the various fields in 
the selected DLAT entry. Conventional LRU circuits 
(not shown) select one of the pair of DLAT entries 
addressed by DRR 3B of Figure 2A. In Figure 5, 
the common ID generator 51 is an AND gate which 
receives the common space signal on line 37A and 
the DLAT load signals on line 38A. When activated, 
generator 51 provides its output as one bits on five 
lines to represent the binary value 31- These lines 
are provided through an OR circuit 56 to the STO 
ID field in the selected DLAT entry. 

Also, line 37A connects the common space 
signal from latch 37 (Figure 4) to an inverter 57 
which output disables a STO ID gate 52 to inhibit 
the active STO ID from being passed from line 55 
from the pointer register to OR circuit 56. There- 
fore, when common bit C is on. the only output 
from OR circuit 56 is the value 31 indicating the 
common ID for the selected DLAT. 

If the common space bit is off, there will be no 
output from generator 51. and inverter 57 will be* 
activating gate 52; in which case the STO ID on 
lines 55 will be outputted through OR circuit 56 to 
the five bit STO ID field in the selected DLAT 
entry. 

VA gate 93 will be gating the LAR bits 8-14 on 
line 31 A to the VA field in the selected DLAT to 
provide the VA identification. Likewise, the RA gate 
94 will be passing the PFRA on line 36B to the RA 
field in the selected DLAT. 



DLAT Read Controls 6A and 6B 

The DLAT Read Controls shown in Figures 6A 
and 6B contain logic for distinguishing program 
address spaces from data spaces, triggered by a 
data space indicator bit 62A in the STD. These 
controls include two identical DLAT read control 
circuits 60 and 66, which respectively receive the 
pair of selected DLAT entries in DLAT tables 0 and 
1. Each circuit 60 and 66 includes a plurality of 
compare circuits. In circuit 60 for example, com- 
pare circuit 61 compares the STO ID from the 
selected DLAT with the active STO ID received 
from the pointer register 23 (in Figure 2A) to deter- 
mine if the DLAT address is in the requesting 
address space. If they are equal, a signal is pro- 
vided on output line 61 B to an OR circuit 61 A. If 
they are unequal, no signal is provided on line 61 B, 



and the DLATs address is not in the requesting 
address space. However, this invention uses a 
common storage detector AND circuit 62 to sense 
if the STO ID in the selected DLAT is the common 

s storage indicator binary 31. Circuit 62 is an AND 
gate which requires that all five STO ID inputs be 
ones to sense the binary 31 indication and activate 
the output to AND circuit 62C. If the output of 
inverter 62B is an active output (which is the case 

io for program address spaces, where the data space 
indicator 62A is inactive), a positive indication from 
62 (indicating common storage) will be passed to 
OR circuit 61 A, bypassing any unequal condition in 
circuit 61 . If, however, data space indicator 62A is 

75 active, indicating that the STD describes a data 
space, as defined by this invention, this active 
indication will be inverted (62B), thereby inhibiting 
any bypassing of the STOK ID comparison 61 for 
data space addresses that happen to fall within the 

20 range of virtual addresses defined as common for 
address spaces. In summary, OR circuit 61 A pro- 
vides an active output if (1) the received STO ID'S 
are equal, or (2) the address is part of an address 
space, not a data space, and a common ID indica- 

25 tor is the DLAT entry. 

A VA compare circuit 63 compares the VA 
fields in the selected DLAT with bit positions in the 
LAR. If these VA fields compare equal, the DLAT 
translates that VA, provided that an address space 

30 resolution signal is being provided from OR circuit 
61 A to condition DLAT 0 combining circuit 64, 
which then provide an output to a gate 65A which 
thereby passes the main storage address (RA) 
received from the selected DLAT by an RA register 

35 65. The RA is then passed to RA select gate 69 
from the RA register. The outputs of gate 65A and 
output 60A of circuit 64 also condition a gate 64A 
to select the key from the DLAT entry for being 
inputted to key protect circuits 68. 

40 DLAT 1 read controls 66 contain identical cir- 

cuits to the DLAT 0 read controls 60 just de- 
scribed. 

The DLAT read controls 60 and 66 (which are 
simultaneously receiving the outputs of both DLATs 

45 of the pair at a selected hash address) are making 
the decision of which DLAT entry of the pair, or 
neither, will be the DLAT selected by the current 
address request in LAR 31 and pointer register 23 
of fig. 2A. Only one of lines 60A or 66A can be 

so active at any one time from a pair of DLAT entries, 
since only one of the two circuits can have the 
compare equal conditions required to make active 
the respective line. Likewise, only one of the cir- 
cuits 60 or 66 can output an RA through its gate 

55 65A. The gated RA will be provided as input to RA 
select gate 69, but it will not be permitted to exit 
from gate 69 unless the key in the selected DLAT 
entry is equal to the PSW key being received by 
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key protect circuit 68. If the PSW key and DLAT 
key are equal, a signal is provided on line 68A to 
activate a RA select gate 69 to pass its received 
RA to the storage access controls, which will ac- 
cess the address in main storage. However, if the 
key compares unequal in circuits 68, a signal on 
line 68B indicates a key violation which will be 
provided to the processor interrupt circuits, and the 
access will be prevented by gate 69. 

OR circuit 67 also has a complementary output 
67B which indicates that neither input 60A or 66A 
is indicating a selection of either DLAT entry 0 or 
1. in the pair. The signal on output line 67B gen- 
erates a DLAT exception signal to indicate that the 
virtual address in LAR 31 is not represented by any 
current DLAT entry, and it is necessary for the 
translator to translate the virtual address into an 
absolute page address for a page which may be 
residing in main storage. If the page is not residing 
in main storage, then it must be obtained from an 
I/O device or expanded storage before the tran- 
slator can access it and load a DLAT entry with the 
address translation. 

Referring again to Figure 1B, it shows the 
entire addressing range of the data space to be 
available for storing private data To accomplish 
this, while providing for low-address protection for 
program address spaces, it is necessary to over- 
ride this protection mechanism for store requests 
into data spaces. Figure 13 illustrates how this is 
accomplished. A protection exception 130 is trig- 
gered when a store request 131 is issued for a 
logical address within address range 0-511 
(indicated by bits 1-22 (132) being equal to zero), 
while the low address protection indicator 133 is 
active, and the data space indicator 134 (originating 
in the STD - See Figure 6, ref 62A) is inactive (note 
inverter 135 will convert this inactive indication into 
a positive signal as input to the AND circuit 136); 
the protection exception is overridden when the 
data space indicator 134 is active, which is con- 
verted by the inverter 135 into a negative input to 
the AND circuit 136. thus disabling the protection 
exception 130. 

2) Mechanism for Accessing Data Within a Data 
Space From a Program Space 

The value of the data space construct lies 
primarily in its use as a data repository - i.e., a 
"storage bin". To use it in this manner, a mecha- 
nism for accessing it from within a program ad- 
dress space is required. 

An example embodiment. Figure 8, is a pro- 
gram executing in an address space which mul- 
tiplies one operand, contained in data space 2 (81 ) 
by a second operand, contained in a register, and 



stores the result in data space 3 (82). 

In order to accomplish this series of operations, 
a mechanism must be provided to associate the 
logical address of the second operand (contained 

5 in register 2 in the example of the multiply instruc- 
tion shown in Figure 8) with data space 2, and the 
logical address of the second operand of the store 
instruction (contained in register 3 in the example 
shown in Figure 8) with data space 3. Graphically, 

10 the mechanism for performing this association is 
designated as "STD selection" (91) in Figure 9, to 
indicate that the mechanism must produce a seg- 
ment table descriptor (STD) associated with the 
appropriate data space. Many such mechanisms 

75 are possible - for example, such a mechanism is 
provided in the Butwell and Scalzi U.S. patents 
referenced above (#4,355,355 and 4,521,846) and 
is assigned to the assignee of the present inven- 
tion. Another such mechanism is disclosed in the 

20 co-pending invention entitled "Access Register 
Translation Means for Address Generating Mecha- 
nism for Multiple Virtual Spaces" by R. I. Baum et 
al., (Docket No. PO9-87-004) . filed on even date 
herewith, and assigned to the same assignee. The 

25 segment table descriptor, once produced, is input 
(92) to the Dynamic Address Translation (DAT) 
process. 

Figure 10 shows the STD selection mechanism 
(101) according to the above-mentioned co-pend- 

30 ing invention in addressing operands. The process 
of using the contents of an access register to 
obtain a STD for use in a dynamic address transla- 
tion, is called an access-register-translation (ART) 
operation, which is generally designated at 100. 

35 (Note that this operation is shown at 20 in Figure 
2.) An instruction 102 has an operation code, a B 
field which designates a general register 104 con- 
taining a base address, and a displacement D, 
which, when joined with the base address of gen- 

40 eral register 104 by an adder 105, forms a logical 
address of a storage operand. In the access regis- 
ter mode, the B field also designates an access 
register 106 which contains an ALET which, when 
translated at ART 100, provides the STD for the 

45 address space in which the data is stored. The 
STD from the ART 100 may be joined with the 
logical address from the adder 105, and, when 
translated together in the dynamic address transla- 
tion (DAT) operation, designated generally at 108 

so (and described in more detail in Figure 4), provides 
the real address of the operand for use by the 
system. In addition to the B field and displacement 
D shown in Figure 10, an R field may be used for 
designating a general register containing a logical 

55 address of a storage operand. 

Figure 11 provides an overview showing the 
translation of an ALET to a real address. Shown at 
110 is an array of general registers numbered 0 
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through 15. An array 112 of access registers, also 
numbered 0 through 15, are arranged such that 
each access register is paired with a respective 
one of the general registers of array 110, as pre- 
viously described in connection with Figure 10. An 
access-list entry number (ALEN) in the ALET se- 
lects an entry in one of the access lists 114 or 115. 
Access list 114 is the DUAL, and access list 115 is 
the PSAL In the example of Figure 1 1 the ALEN of 
access register 2 points to entry 3 of the PSAL 
115. The origin of the DUAL is specified by a 
dispatchable-unit-access-iist designation (DUALD) 
116 which is found by decoding an entry in control 
register 2, as will be explained. The origin of the 
PSAL is specified by a primary-space-access-list 
designation (PSALD) 117 which is found by decod- 
ing an entry in control register 5, as will be ex- 
plained. The access-list designation used in the 
ART is known as the effective access-list designa- 
tion (ALD). 

Each entry in the access list includes an ASTE 
address which points to an ASN second table 
ASTE 118 which may or may not be in an ASN 
second table (AST) 1101. An ASTE may be cre- 
ated and perform its function totally independently 
of actually being in an AST, although some ASTE's 
are required to be in an AST. Each ASTE is similar 
to that used in the DAS facility, and includes an 
STD value to determine the real address by the 
DAT 108, as discussed in connection with Figure 
10. 

* There are two access lists available to a pro- 
gram at the same time each representing a dif- 
ferent capability domain. One access list is called 
the dispatchable unit access list (DUAL) and the 
other the primary space access list (PSAL). A bit in 
the ALET determines whether the ALEN of the 
ALET is pointing to an entry in the DUAL 114 or 
the PSAL 115. Each entry in the access-lists 114 
and 1 1 5 is available for use by programs. 

The DUAL domain is intended to be perma- 
nently associated with the dispatchable unit ("task" 
or "process") on behalf of the program or pro- 
grams executed by the dispatchable unit. There is 
a unique DUAL for every dispatchable unit in the 
system. The DUAL for a dispatchable unit does not 
change even though the dispatchable unit may 
execute programs in many different address 
spaces. The PSAL domain is associated with a 
primary address space. This allows programs ex- 
ecuting within a primary space to share access to a 
common set of address spaces. The PSAL 
changes when the primary address space changes 
such as on a space switching PC operation. A 
program, in possession of a valid ALET, may ac- 
cess an access list entry on either the DUAL 114 
or the PSAL 115, and this entry specifies the 
desired address space. Other domains may also 



be implemented and controlled in a similar manner 
using the ALET and selected control registers. For 
example, a system wide access list (SWAL) do- 
main may be created having the capabilities of all 

5 programs in the system. Various subsets of do- 
mains can be constructed as desired, such as a 
SASN domain access list (SSAL), to allow further 
exploitation of an existing mechanism. 

Entries 0 and 1 of the DUAL are not used 

10 because the ALEPs are reserved for accessing 
operands in the primary and the secondary ad- 
dress spaces, respectively, when in the AR ad- 
dressing mode. The addressing mode of the CPU 
is designated by bits in the PSW. When the CPU is 

75 in the AR addressing mode, an ALET having an 
ALEN of zero always refers to the primary address 
space and an ALET having an ALEN of one always 
refers to the secondary address space. See Figure 
11 in which box 119 identifies these special ALETs 

20 and provide the correct STD for the PASN and the 
SASN to DAT when they occur. When the CPU is 
in the home addressing mode, the home address 
space is the source of instructions to be executed 
and of data. The home address space is defined as 

25 that address space having the supervisor control 
information for the program being executed. By 
convention, the operating system assigns an ALEN 
of 2 for each home space for the purpose of data 
access and the STD for the home space is ob- 

30 tained by ART for such access. Since the STD 
values for the primary and the secondary address 
spaces are kept in control registers 1 and 7, re- 
spectively, access list entries 0 and 1 are not used. 
As implemented, entries 0, 1 and 2 in the PSAL 

as 115 are unused and are marked invalid. 

An ART lookaside buffer (ALB) 1100 receives 
and saves inputs from the AR 112. and AL 115, 
and the AST 118 to hold the STD resulting from 
ART. The ALB also retains the access list designa- 

40 tion, DUCT or PSAL When the same ALET is used 
again. ALB 1100 provides the correct output di- 
rectly to DAT 108 so that ART does not have to be 
repeated. 

This process of Access Register Translation 
45 generates the STD (200) in Figure 2 that is used in 
the translation process, shown at 4 in Figure 2. 



3. Use of a Data Space for Data Isolation 

50 "~ 

The data space described above is particularly 
well suited for use by an applications program as a 
data repository in connection with a mechanism 
known in MVS/XA as "Data-in- Virtual" , or DIV (see. 

55 e.g. MVS/Extended Architecture Supervisor Ser- 
vices and Macro Instructions (GC28-1154); An ln- 
troduction to Data-in- Virtual (GG66-0259); 
MVS/Extended Architecture System Logic Library- 



8 



15 



EP 0 327 798 A2 



16 



Data-in-Virtual (LY28-1655)). 

Using the DIV technique, it is possible to map 
a large data set residing on external storage into a 
contiguous address range within a data space, and 
operate on it This use of a data space is illustrated 
in Figure 12. The large potential size of a data 
space, with no common area "holes" to work ar- 
ound (see Figures 1A and 1B) makes it possible to 
map a large data set (up to 2 gigabytes) into a data 
space (120). It can then be accessed by the ap- 
plications programmer as if it had been read into 
storage (121), even though data set pages are 
brought into main storage automatically by the 
system only if actually accessed (122). Finally, the 
system monitors changed pages, and writes to 
external storage only changed pages in the commit 
process (123). 

Thus, while the invention has been described 
with reference to preferred embodiments thereof, it 
will be understood by those skilled in the art that 
various changes in form and details may be made 
without departing from the scope of the invention. 



Claims 

1. Mechanism for supporting two distinct ad- 
dress space types, a program address space type 
in which at least one segment of storage is com- 
mon to all such address space types, and at least 
one segment of storage is unique to a particular 
address space of said address space type, and a 
data space type in which ail segments of storage 
are unique to each address space of such address 
space type, in a central processing complex com- 
prising a CPU, main storage, system resources 
connected to the CPU and to the main storage, and 
an operating system supporting a plurality of ad- 
dress spaces containing instructions and data, 
characterized by 

means for resolving virtual addresses within one of 
said address spaces into real addresses within 
main system storage, by a dynamic lookaside table 
having entries comprising virtual addresses and 
corresponding real addresses, said entries usable 
for bypassing said means for resolving virtual ad- 
dresses, and by means for distinguishing between 
said program address spaces, which permit sharing 
of said entries among said address spaces of said 
address space type for addresses within said com- 
mon segments, and said data spaces, which do not 
permit said sharing of said entries. 

2. Mechanism of claim 1 , 

characterized by means for overriding low address 
protection for store operations having a target lo- 
cated in a data space. 



3. Mechanism of claim 1 or 2, 
characterized in that means for distinguishing be- 
tween said program address spaces and said data 
spaces comprises a data space indicator located in 

s a segment table descriptor (STD), said one of the 
descriptors being associated with each of said pro- 
gram address spaces and each of said data 
spaces, said data space indicator being active 
when the descriptor is associated with one of said 

io data spaces, and inactive when the descriptor is 
associated with one of said program address 
spaces. 

4. Mechanism of claim 2, 

characterized by means for overriding low address 
75 protection comprises said data space indicator in- 
hibiting the generation of a low address protection 
exception when said indicator is active, and not 
inhibiting said exception when said indicator is in- 
active, and that means are available for accessing 
20 data within said data spaces from programs resid- 
ing in said program address spaces. 

5. Mechanism of claim 4, 

characterized in that the means for accessing data 
within said data spaces further comprises a seg- 
25 ment table descriptor (STD) selection mechanism 
for associating one of said virtual addresses with a 
segment table associated with one of said data 
spaces. 

6. Mechanism of one of claims 1 to 5, 

30 characterized in that the STD selection mechanism 
(STD) comprises a plurality of access register 
means each associated with a particular one of a 
plurality of general register means, each of said 
access register means having the capability of 

35 holding an access list entry token (ALET), an ac- 
cess list means containing access list entries 
(ALE's) each identified by an access list entry 
token (ALET), means for obtaining an access list 
entry (ALE) corresponding to an access list entry 

40 token (ALET) in one of said access register means, 
memory means for containing address space num- 
ber second table entries (ASTE's). means for iden- 
tifying an address space number second table en- 
try (ASTE) from said access list entry (ALE) and for 

45 obtaining said address space number second table 
entry (ASTE), wherein said address space number 
second table entry (ASTE) contains a desired seg- 
ment table descriptor (STD). 

7. Method of translating virtual addresses to 
so real addresses for the mechanism of claims 1 to 6, 

characterized by storing previously translated vir- 
tual addresses with corresponding real (main stor- 
age) addresses as entries in a translation lookaside 
buffer, and by using one of said entries to bypass 
55 a translation process if a virtual address to be 
translated matches a virtual address in one of said 
entries, and either both of said virtual addresses 
are associated with the same segment table de- 
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scriptor. or both of said virtual addresses are asso- 
ciated with an address in a common segment of 
storage, and neither address is part of a data 
space. 

8. Method of translating virtual addresses of 5 
claim 7, characterized by using the contents of an 
access register to obtain a segment table descrip- 
tor for use in translating addresses of said data for 
accessing data within one of said data spaces from 

a program executing in one of said program ad- to 
dress spaces. 

9. Method of claim 8 

characterized by overriding a low address protec- 
tion exception where said accessing data within a 
data space is by means of a store operation into an is 
address within an address range of 0-511, and a 
control register indicates that said low address pro- 
tection is active. 

10. Method of claim 9 

characterized in that for isolating data to be acces- 20 
sed by a program executing in one of said address 
spaces into one of said data spaces, that data from 
external storage into a contiguous section of the 
virtual addressing range of a data space are 
mapped to make said data directly addressable by 25 
said program, that data are operated, so that said 
operating causes portions of said data not yet read 
into main storage to be read in by the operating 
system, and that the data have been written back 
to external storage so * that said writing causes 30 
physical I/O to occur only for data pages on which 
portions of said data have been changed by said 
operating. 
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